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This document defines the format of an electronic signature that can remain valid 
over long periods. This includes evidence as to its validity even if the signer or 
verifying party later attempts to deny (i.e., repudiates the validity of the signature). 
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This document defines requirements for a baseline time-stamp policy for Time- 
Stamping Authorities (TSAs) issuing time-stamp tokens, supported by public key 
certificates, with an accuracy of one second or better. A TSA may define its own 
policy which ... 
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The e-business and e-government processes demand to prove the existence of data 
at a specific point of time and to demonstrate the integrity of the data since that 
time during long-term periods is becoming of utmost importance. An approach and 
a solution ... 
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Forward-secure signatures (FSSs) have recently received much attention from the 
cryptographic theory community as a potentially realistic way to mitigate many of 
the difficulties digital signatures face with key exposure. However, no previous 
works have ... 
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This document defines signature policies for electronic signatures. A signature 
policy is a set of rules for the creation and validation of an electronic signature, 
under which the validity of signature can be determined. A given legal/contractual 
context ... 
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Long-term archival of signed documents presents specific challenges that do not 
need to be considered in short-term storage systems. In this paper we present a 
Secure Long-Term Archival System (SLTAS) that protects, in a verifiable way, the 
validity ... 
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There is a global trend towards extending legal deposit to include dig ital 
publications in order to maintain comprehensive national archives. However, 
including digital publications in legal deposit regulation is not enough to ensure the 
long-term preservation ... 
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In this paper we give a new signature algorithm that allows for controlled changes 
to the signed data. The change operations we study are removal of subdocuments 
(redaction), pseudonymization, and gradual deidentification of hierarchically 
structured ... 
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This paper describes a new design of the remote device management (RDM) 
framework, which is suited to personal devices. Once this Remote Personal Device 
Management (RPDM) framework is enabled, parties like manufacturing companies, 
service providers, ... 
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We have witnessed great interest and a wealth of promise in content-based image 
retrieval as an emerging technology. While the last decade laid foundation to such 
promise, it also paved the way for a large number of new techniques and systems, 
got many ... 
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Audit logs are considered good practice for business systems, and are required by 
federal regulations for secure systems, drug approval data, medical information 
disclosure, financial records, and electronic voting. Given the central role of audit 
logs, ... 
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Public-key based certificates provide a standard way to prove one's identity, as 
attested by some certificate authority (CA). However, plain certificates provide a 
binary identification: either the whole identity of the subject is known, or nothing 
is ... 
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Tracing attack packets to their sources, known as I P traceback, is an important 
step to counter distributed denial-of-service (DDoS) attacks. In this paper, we 
propose a novel packet logging based (i.e., hash-based) traceback scheme that 
requires an ... 
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Keywords: accountable certificate management, attesters, authenticated search 
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A large portion of the government, business, cultural, and scientific digital data 
being created today needs to be archived and preserved for future use of periods 
ranging from a few years to decades and sometimes centuries. A fundamental 
requirement ... 
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In this paper, we propose a secure and efficient user authentication scheme with 
countable and time-bound features. The countable feature is to limit the use to a 
certain number of times, which means that the users are able to successfully log 
into the ... 
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A lot of progress has been made to secure network communication, e.g., through 
the use of cryptographic algorithms. However, this offers only a partial solution as 
long as the communicating end points still suffer from security problems. A number 
of ... 
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This paper presents a method to increase the accountability of certificate 
management by making it intractable for the certification authority (CA) to create 
contradictory statements about the validity of a certificate. The core of the method 
is a new ... 
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Cryptographic hash functions have been widely studied and are used in many 
current systems. Though much research has been done on the security of hash 
functions, system designers cannot determine which hash function is most suitable 
for a particular ... 
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